I heartily recommend: Thycotic Secret Server[^] It has AD integration, cloud or on-prem, auto password changing for network accounts, encryption, and a lot more. (I am not affiliated with the company in any way, but we use this in at my place of business, numbering ~750 employees).